Disclaimer:
Educational Use Only:
The website links provided are to be used strictly for educational and knowledge-gaining purposes only.
No Misuse:
Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.
Respect for Websites and Businesses:
Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.
Acknowledge Value of Knowledge:
Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.
No Endorsement:
The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.
User Responsibility:
By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.
- Port spanning is another term for
a. Port forwarding
b. Port mirroring
c. Port routing
d. Port switching
Answer: b. Port mirroringkentik - SPAN stands for
a. Switched Port Access Node
b. Switched Port Analyzer
c. Secure Port Analysis Network
d. Spanning Port Allocation Node
Answer: b. Switched Port Analyzerkentik - The main purpose of port spanning is to
a. Encrypt data on networks
b. Monitor network traffic
c. Route incoming data packets
d. Increase throughput
Answer: b. Monitor network traffickentik - SPAN ports are used primarily for
a. Connecting end-user devices
b. Network monitoring and analysis
c. Blocking malicious traffic
d. Enabling wireless access
Answer: b. Network monitoring and analysiskentik - Port spanning helps detect
a. Hardware malfunctions
b. Malicious intrusions and anomalies
c. Disk usage
d. File system permissions
Answer: b. Malicious intrusions and anomalieskentik - Cisco introduced the concept of
a. Port Spanning Tree Protocol
b. SPAN Port Mirroring
c. Data Link Security
d. Encrypted LAN Access
Answer: b. SPAN Port Mirroringcisco+1 - A SPAN port sends
a. A duplicate copy of traffic to a monitoring device
b. Encrypted packets to routers
c. Only control-plane packets
d. Non-replicated frames
Answer: a. A duplicate copy of traffic to a monitoring devicekentik - Remote SPAN (RSPAN) is different from SPAN because it
a. Operates on Layer 3
b. Mirrors traffic over Layer 2 remotely
c. Encrypts traffic automatically
d. Only works for VLANs
Answer: b. Mirrors traffic over Layer 2 remotelyniagaranetworks - ERSPAN allows
a. VLAN hopping prevention
b. Traffic capture across routed networks using GRE
c. Automatic IP filtering
d. NAT translation
Answer: b. Traffic capture across routed networks using GREniagaranetworks - One limitation of SPAN ports is
a. They cannot send broadcast traffic
b. They can drop packets under heavy load
c. They encrypt packets
d. They isolate VLANs
Answer: b. They can drop packets under heavy loadneox-networks - The system connected to a SPAN port is usually a
a. Router
b. Monitoring tool or IDS
c. Printer
d. DHCP server
Answer: b. Monitoring tool or IDSkentik - SPAN helps in
a. Network troubleshooting
b. Wireless access setup
c. IP routing
d. Local policy advertisement
Answer: a. Network troubleshootingkentik - SPAN operates primarily on
a. Layer 2
b. Layer 3
c. Layer 4
d. Application layer
Answer: a. Layer 2cisco+1 - Port mirroring enhances
a. Network visibility
b. Data compression
c. Packet encryption
d. Routing security
Answer: a. Network visibilityniagaranetworks - In SPAN configuration, the source port is
a. Where traffic is mirrored from
b. The storage server
c. The endpoint computer
d. The VLAN controller
Answer: a. Where traffic is mirrored from30dayscoding+1 - In SPAN setup, the destination port is
a. Where the mirrored traffic is sent
b. The router interface
c. VLAN Trunk
d. Wireless access point
Answer: a. Where the mirrored traffic is sent30dayscoding - Port mirroring is critical for
a. Security audits and analysis
b. User access control only
c. Printing management
d. Reducing backup time
Answer: a. Security audits and analysiszenarmor+1 - When traffic is mirrored,
a. The original packet remains unaffected
b. The packet is modified
c. The header is removed
d. The checksum is disabled
Answer: a. The original packet remains unaffectedkentik - SPAN can monitor
a. Ingress, egress, or both directions of a port
b. Only ingress traffic
c. Only broadcast packets
d. Only tunneled VPN packets
Answer: a. Ingress, egress, or both directions of a portcisco - Using too many SPAN sessions can
a. Slow switch performance
b. Increase link encryption
c. Add redundancy
d. Improve speed
Answer: a. Slow switch performanceneox-networks - SPAN ports are ideal for
a. Offline packet inspection
b. Dynamic routing tables
c. Access control lists
d. Network address translation
Answer: a. Offline packet inspectionkentik - SPAN is configured using
a. Switch management console or CLI
b. Router configuration panel
c. End-user GUI
d. Cloud controller app
Answer: a. Switch management console or CLIcisco - SPAN differs from TAP because
a. It uses software-based replication
b. It is hardware-only
c. It encrypts packets
d. It blocks traffic
Answer: a. It uses software-based replicationneox-networks - TAPs provide
a. Dedicated hardware-based traffic copying
b. VLAN prioritization
c. Encryption
d. NAT support
Answer: a. Dedicated hardware-based traffic copyingneox-networks - A key use case for SPAN ports is
a. Intrusion Detection Systems (IDS)
b. DHCP discovery
c. VPN handshake
d. SNMP authentication
Answer: a. Intrusion Detection Systems (IDS)niagaranetworks+1 - The SPAN destination port should
a. Not send outgoing traffic
b. Send all mirrored data forward
c. Route packets dynamically
d. Broadcast packets
Answer: a. Not send outgoing trafficcisco - SPAN ports replicate
a. Ethernet frames
b. Application data only
c. IP headers
d. DNS queries exclusively
Answer: a. Ethernet frameskentik - Port mirroring is useful in
a. Compliance monitoring
b. Web development
c. Backup scheduling
d. DHCP relay
Answer: a. Compliance monitoringzenarmor - ERSPAN uses
a. GRE tunneling
b. SSH encryption
c. Port-security VLAN tagging
d. PPP encapsulation
Answer: a. GRE tunnelingniagaranetworks - Mirror traffic in SPAN is
a. Read-only for observers
b. Writable by devices
c. Editable packets
d. Encrypted by default
Answer: a. Read-only for observerskentik - SPAN ports are configured per
a. VLAN, interface, or session
b. Router
c. ARP cache
d. File server
Answer: a. VLAN, interface, or session30dayscoding - SPAN tools often include
a. Wireshark
b. DHCP server
c. NTP client
d. FTP agent
Answer: a. Wiresharkkentik - The reliability of SPAN is reduced under
a. High traffic load
b. File transfers
c. VPN login
d. Static IP address
Answer: a. High traffic loadneox-networks - SPAN can be implemented
a. Locally or remotely
b. Only locally
c. Only across subnets
d. Via proxy servers
Answer: a. Locally or remotelyniagaranetworks - An advantage of SPAN is
a. No need for extra hardware
b. Guaranteed performance
c. Packet loss reduction
d. Data encryption
Answer: a. No need for extra hardwareneox-networks - SPAN ports cannot
a. Send mirrored traffic upstream
b. Apply QoS policies
c. Transmit broadcast
d. Forward user data
Answer: b. Apply QoS policiesneox-networks - Port spanning supports
a. VLAN-specific mirroring
b. Encrypted VLAN tunneling
c. WAN-only capture
d. SNMPv3 sessions
Answer: a. VLAN-specific mirroring30dayscoding+1 - SPAN ports can duplicate
a. Both ingress and egress packets
b. Broadcast packets only
c. Layer 3 only
d. Non-routed frames
Answer: a. Both ingress and egress packetscisco - SPAN helps in identifying
a. Latency and performance bottlenecks
b. Hardware failures
c. VLAN tags
d. IP spoofing only
Answer: a. Latency and performance bottleneckskentik - SPAN destination ports connect to
a. IDS or packet analyzers
b. End-user PCs
c. DHCP relays
d. Domain controllers
Answer: a. IDS or packet analyzerskentik - SPAN sessions can be
a. One source to one destination
b. Many-to-one
c. One-to-many
d. All of the above
Answer: d. All of the abovecisco - SPAN is crucial for
a. Network visibility and diagnostics
b. Wireless coverage
c. DHCP management
d. IP addressing
Answer: a. Network visibility and diagnosticskentik - Port mirroring enables
a. Passive network monitoring
b. Traffic modification
c. Active routing
d. Packet destruction
Answer: a. Passive network monitoringkentik - A common misuse of SPAN is
a. Treating it as packet forwarding
b. Using it with IDS
c. Employing it for system backups
d. VLAN mirroring
Answer: a. Treating it as packet forwardingneox-networks - SPAN ports must be
a. Properly isolated from production traffic
b. Integrated into routing loops
c. Used as trunk ports
d. Enabled for all VLANs
Answer: a. Properly isolated from production traffic30dayscoding - RSPAN allows capture from
a. Remote switches over a Layer 2 network
b. WAN routers only
c. Cloud services
d. Virtual machines only
Answer: a. Remote switches over a Layer 2 networkniagaranetworks - SPAN sessions require
a. Manual configuration
b. Cloud provisioning
c. DHCP mapping
d. IP binding
Answer: a. Manual configuration30dayscoding+1 - SPAN’s main drawback for forensic analysis is
a. Packet drops during overload
b. Lack of encryption
c. Too much storage use
d. VLAN conflicts
Answer: a. Packet drops during overloadneox-networks - SPAN traffic is unacknowledged because
a. It is a copy only
b. It lacks TCP headers
c. It uses UDP
d. It bypasses checksums
Answer: a. It is a copy onlykentik - In cybersecurity, port spanning assists in
a. Monitoring data exfiltration and attacks
b. Network topology changes only
c. DHCP lease renewals
d. User account synchronization
Answer: a. Monitoring data exfiltration and attacksniagaranetworks+2
- https://www.kentik.com/blog/what-is-port-mirroring-span-explained/
- https://www.cisco.com/c/en/us/support/docs/switches/catalyst-6500-series-switches/10570-41.html
- https://blog.niagaranetworks.com/blog/to-span-the-virtual-network
- https://www.neox-networks.com/en/solutions/network-tap-versus-span-mirror-port/
- https://30dayscoding.com/blog/span-port-configuration-guide
- https://www.zenarmor.com/docs/network-basics/what-is-port-mirroring
- https://www.sanfoundry.com/cyber-security-questions-answers-ports-types-1/
- https://www.sanfoundry.com/1000-cyber-security-questions-answers/
- https://www.theknowledgeacademy.com/blog/cyber-security-mcq-and-answers/
- https://www.interviewbit.com/cyber-security-mcq/
- https://www.scribd.com/document/515140126/Cyber-Security
- https://byjus.com/gate/cyber-security-mcqs/
- https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3.2_0_se/multibook/configuration_guide/b_consolidated_config_guide_3850_chapter_011111.pdf
- https://testbook.com/objective-questions/mcq-on-cyber-security-and-emerging-technologies–5eea6a0d39140f30f369e309
- https://www.alooba.com/skills/concepts/routing-and-switching-611/switch-port-security/
- https://www.vinsys.com/blog/top-30-mcqs-ceh-exam-preparation
- https://www.yeahhub.com/cyber-security-mcq-35-questions-with-answers/
- https://www.sciencedirect.com/topics/computer-science/port-mirroring
- https://www.grandmetric.com/knowledge-base/design_and_configure/span-port-configuration/
- https://www.youtube.com/watch?v=s-DKOkWDFyw